General

  • Target

    b0ff4c9b721d046b52e2815c13cff2cd733eac2f

  • Size

    317KB

  • Sample

    241109-y1pdws1fkk

  • MD5

    dbe8fd6be0c5bc026d616cfb654e9dbe

  • SHA1

    b0ff4c9b721d046b52e2815c13cff2cd733eac2f

  • SHA256

    b029440cc6e0ef351cce258d3c1f7c7904427e291f043f0a5153dd15707edc6c

  • SHA512

    6d9b0736fca0a02c6eaa115b18f0b5421c25fbb63a6e169762f0e750069da55eb55edc076b4ce9b16ef8ccc788fe03907f90f57f3841c843ae61618b71d532e1

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      b0ff4c9b721d046b52e2815c13cff2cd733eac2f

    • Size

      317KB

    • MD5

      dbe8fd6be0c5bc026d616cfb654e9dbe

    • SHA1

      b0ff4c9b721d046b52e2815c13cff2cd733eac2f

    • SHA256

      b029440cc6e0ef351cce258d3c1f7c7904427e291f043f0a5153dd15707edc6c

    • SHA512

      6d9b0736fca0a02c6eaa115b18f0b5421c25fbb63a6e169762f0e750069da55eb55edc076b4ce9b16ef8ccc788fe03907f90f57f3841c843ae61618b71d532e1

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks